emilsoftware-utilities 2.0.0-dev.84 → 2.0.0-dev.85

package/dist/accessi-module/Dtos/TipoFiltro.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"TipoFiltro.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/TipoFiltro.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAAmE;AACnE,yDAAyC;AACzC,qDAA2G;AAC3G,iDAA8C;AAE9C,MAAa,UAAU;IAAvB;QAyCE,eAAU,GAAW,CAAC,CAAC;IACzB,CAAC;CAAA;AA1CD,gCA0CC;AAlCC;IAPC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,mCAAmC;QAChD,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,MAAM;KACb,CAAC;IACD,IAAA,uBAAK,GAAE;IACP,IAAA,4BAAU,GAAE;;0CACG;AAWhB;IATC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,wBAAwB;QACrC,OAAO,EAAE,iBAAiB;QAC1B,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,KAAK;KAChB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;IACb,IAAA,4BAAU,GAAE;;0CACG;AAWhB;IATC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,2BAA2B;QACxC,OAAO,EAAE,aAAa;QACtB,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,KAAK;KAChB,CAAC;IACD,IAAA,0BAAQ,GAAE;IACV,IAAA,2BAAS,EAAC,EAAE,CAAC;IACb,IAAA,4BAAU,GAAE;;0CACG;AAWhB;IATC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,kBAAkB;QAC/B,OAAO,EAAE,CAAC;QACV,IAAI,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC;QACZ,QAAQ,EAAE,KAAK;QACf,OAAO,EAAE,CAAC;KACX,CAAC;IACD,IAAA,sBAAI,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC;IACX,IAAA,4BAAU,GAAE;;8CACU;AAGzB,MAAa,iBAAkB,SAAQ,2BAAY;CAKlD;AALD,8CAKC;AADG;IAHG,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,UAAU,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAChD,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,UAAU,CAAC;;iDACH;AAG1B,MAAa,gBAAgB;CAS5B;AATD,4CASC;AADG;IAPC,IAAA,6BAAmB,EAAC;QACjB,WAAW,EAAE,uBAAuB;QACpC,IAAI,EAAE,CAAC,CAAC,EAAC,CAAC,CAAC;KACd,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,sBAAI,EAAC,CAAC,CAAC,EAAC,CAAC,CAAC,CAAC;IACX,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;;oDACD","sourcesContent":["import { ApiProperty, ApiPropertyOptional } from '@nestjs/swagger';\nimport { Type } from 'class-transformer';\nimport { IsIn, IsInt, IsNotEmpty, IsOptional, IsString, MaxLength, ValidateNested } from 'class-validator';\nimport { BaseResponse } from './BaseResponse';\n\nexport class TipoFiltro {\n  @ApiProperty({\n    description: 'Identificativo del tipo di filtro',\n    example: 1,\n    type: Number,\n  })\n  @IsInt()\n  @IsNotEmpty()\n  tipFil!: number;\n\n  @ApiProperty({\n    description: 'Descrizione del filtro',\n    example: 'Filtro standard',\n    maxLength: 20,\n    required: false,\n  })\n  @IsString()\n  @MaxLength(20)\n  @IsOptional()\n  desFil?: string;\n\n  @ApiProperty({\n    description: 'Campo associato al filtro',\n    example: 'campoValore',\n    maxLength: 20,\n    required: false,\n  })\n  @IsString()\n  @MaxLength(20)\n  @IsOptional()\n  fldFil?: string;\n\n  @ApiProperty({\n    description: 'Filtro abilitato',\n    example: 1,\n    enum: [0, 1],\n    required: false,\n    default: 1,\n  })\n  @IsIn([0,1])\n  @IsOptional()\n  flgEnabled?: 0 | 1 = 1;\n}\n\nexport class GetFiltriResponse extends BaseResponse {\n      @ApiProperty({ type: TipoFiltro, isArray: true })\n      @ValidateNested({ each: true })\n      @Type(() => TipoFiltro)\n    Result !: TipoFiltro[]\n}\n\nexport class GetFiltriRequest {\n    @ApiPropertyOptional({\n        description: 'Mostra solo abilitati',\n        enum: [0,1]\n    })\n    @IsOptional()\n    @IsIn([0,1])\n    @Type(() => Number)\n    flgEnabled?: 0 | 1\n}\n\n\n"]}

package/dist/accessi-module/Dtos/TokenResult.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"TokenResult.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/TokenResult.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAE9C,MAAa,WAAW;CAmBvB;AAnBD,kCAmBC;AAdG;IAJC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,wCAAwC;QACrD,OAAO,EAAE,MAAM;KAClB,CAAC;;8CACiB;AAMnB;IAJC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,8BAA8B;QAC3C,OAAO,EAAE,yCAAyC;KACrD,CAAC;;0CACa;AAOf;IALC,IAAA,qBAAW,EAAC;QACT,WAAW,EAAE,iCAAiC;QAC9C,IAAI,EAAE,CAAC,QAAQ,EAAE,OAAO,CAAC;QACzB,OAAO,EAAE,QAAQ;KACpB,CAAC;;yCACwB","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\n\nexport class TokenResult {\n    @ApiProperty({\n        description: \"Tempo di scadenza del token in secondi\",\n        example: \"3600\"\n    })\n    expiresIn!: string;\n\n    @ApiProperty({\n        description: \"Valore del token JWT o Basic\",\n        example: \"eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9...\"\n    })\n    value!: string;\n\n    @ApiProperty({\n        description: \"Tipo di token di autenticazione\",\n        enum: [\"Bearer\", \"Basic\"],\n        example: \"Bearer\"\n    })\n    type!: \"Bearer\" | \"Basic\";\n}\n"]}

package/dist/accessi-module/Dtos/TwoFactorDtos.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"TwoFactorDtos.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/TwoFactorDtos.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAAgE;AAEhE,MAAa,qBAAqB;IAAlC;QAEE,sBAAiB,GAAS,IAAI,CAAC;QAY/B,WAAM,GAAY,OAAO,CAAC;IAC5B,CAAC;CAAA;AAfD,sDAeC;AAbC;IADC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,IAAI,CAAC,EAAE,WAAW,EAAE,qDAAqD,EAAE,CAAC;;gEACnE;AAG/B;IADC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,0EAA0E,EAAE,CAAC;;0DACpF;AAGrB;IADC,IAAA,qBAAW,EAAC,EAAE,MAAM,EAAE,WAAW,EAAE,CAAC;;wDAClB;AAGnB;IADC,IAAA,qBAAW,EAAC,EAAE,OAAO,EAAE,EAAE,EAAE,WAAW,EAAE,4CAA4C,EAAE,CAAC;;iEAC5D;AAG5B;IADC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,CAAC,OAAO,CAAC,EAAE,CAAC;;qDACP;AAG5B,MAAa,sBAAsB;CAKlC;AALD,wDAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,SAAS,EAAE,EAAE,EAAE,SAAS,EAAE,EAAE,EAAE,CAAC;IAC7C,IAAA,0BAAQ,GAAE;IACV,IAAA,yBAAO,EAAC,gBAAgB,CAAC;;2DACL;AAGvB,MAAa,sBAAuB,SAAQ,sBAAsB;CAejE;AAfD,wDAeC;AAXC;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oCAAoC,EAAE,OAAO,EAAE,QAAQ,EAAE,OAAO,EAAE,UAAU,EAAE,CAAC;IAC1G,IAAA,0BAAQ,GAAE;IACV,IAAA,yBAAO,EAAC,SAAS,EAAE,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;;oDACvD;AAUd;IARC,IAAA,qBAAW,EAAC;QACX,QAAQ,EAAE,KAAK;QACf,WAAW,EAAE,+EAA+E;QAC5F,OAAO,EAAE,MAAM;KAChB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,GAAE;IACV,IAAA,yBAAO,EAAC,kBAAkB,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;;qDACjF","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { IsOptional, IsString, Matches } from 'class-validator';\n\nexport class TwoFactorChallengeDto {\n  @ApiProperty({ enum: [true], description: 'Il login non e completo: nessun JWT e stato emesso.' })\n  twoFactorRequired: true = true;\n\n  @ApiProperty({ description: 'Identificativo opaco della verifica, non utilizzabile come Bearer token.' })\n  challengeId!: string;\n\n  @ApiProperty({ format: 'date-time' })\n  expiresAt!: string;\n\n  @ApiProperty({ example: 60, description: 'Secondi minimi prima del prossimo reinvio.' })\n  resendAfterSeconds!: number;\n\n  @ApiProperty({ enum: ['email'] })\n  method: 'email' = 'email';\n}\n\nexport class ResendTwoFactorRequest {\n  @ApiProperty({ minLength: 64, maxLength: 64 })\n  @IsString()\n  @Matches(/^[a-f0-9]{64}$/)\n  challengeId!: string;\n}\n\nexport class VerifyTwoFactorRequest extends ResendTwoFactorRequest {\n  @ApiProperty({ description: 'Codice monouso ricevuto via email.', example: '012345', pattern: '^\\\\d{6}$' })\n  @IsString()\n  @Matches(/^\\d{6}$/, { message: 'Il codice deve contenere 6 cifre.' })\n  code!: string;\n\n  @ApiProperty({\n    required: false,\n    description: 'Scope applicativi (CSV) con cui filtrare i grant restituiti. Assente = tutti.',\n    example: 'STEX',\n  })\n  @IsOptional()\n  @IsString()\n  @Matches(/^[A-Za-z0-9_,]*$/, { message: 'Scope non valido: usare codici separati da virgola.' })\n  scope?: string;\n}\n"]}

package/dist/accessi-module/Dtos/UpdateEnabledStatusRequest.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"UpdateEnabledStatusRequest.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UpdateEnabledStatusRequest.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,qDAA4C;AAE5C,MAAa,0BAA0B;CAQtC;AARD,gEAQC;AADC;IANC,IAAA,qBAAW,EAAC;QACX,WAAW,EAAE,6BAA6B;QAC1C,OAAO,EAAE,IAAI;QACb,IAAI,EAAE,OAAO;KACd,CAAC;IACD,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;;2DACnD","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { IsBoolean } from 'class-validator';\n\nexport class UpdateEnabledStatusRequest {\n  @ApiProperty({\n    description: 'Nuovo stato di abilitazione',\n    example: true,\n    type: Boolean,\n  })\n  @IsBoolean({ message: 'Il valore di enabled deve essere booleano.' })\n  enabled!: boolean;\n}\n"]}

package/dist/accessi-module/Dtos/UserDto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserDto.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UserDto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA6E;AAC7E,yDAAoD;AACpD,qDAWyB;AACzB,6DAA0D;AAC1D,6CAA0C;AAC1C,yDAAsD;AACtD,iDAA8C;AAE9C;;;;GAIG;AACH,MAAa,OAAQ,SAAQ,IAAA,kBAAQ,EAAC,2BAAY,EAAE,CAAC,QAAQ,CAAU,CAAC;CAyLvE;AAzLD,0BAyLC;AAnLC;IALC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,4CAA4C,EAAE,OAAO,EAAE,GAAG,EAAE,CAAC;IACxF,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,EAAC,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;IAC7D,IAAA,qBAAG,EAAC,CAAC,EAAE,EAAE,OAAO,EAAE,gDAAgD,EAAE,CAAC;;6CAChD;AAMtB;IAJC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,OAAO,EAAE,oBAAoB,EAAE,CAAC;IACjF,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;;sCACpE;AAKf;IAHC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,mCAAmC,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IACxF,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;;yCAC1C;AASnB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gCAAgC;QAC7C,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAChC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;;yCAC7C;AASlB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,8CAA8C;QAC3D,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAChC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;;gDAChD;AASzB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,yBAAyB;QACtC,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,YAAY;KACtB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,oDAAoD,EAAE,CAAC;;qDAC9C;AAS9B;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,qCAAqC;QAClD,MAAM,EAAE,WAAW;QACnB,OAAO,EAAE,sBAAsB;KAChC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,iDAAiD,EAAE,CAAC;;8CAClD;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,wCAAwC;QACrD,IAAI,EAAE,uCAAkB;QACxB,OAAO,EAAE,uCAAkB,CAAC,IAAI;KACjC,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,wBAAM,EAAC,uCAAkB,EAAE,EAAE,OAAO,EAAE,yCAAyC,EAAE,CAAC;;mDAC3C;AAQxC;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sCAAsC;QACnD,OAAO,EAAE,WAAW;KACrB,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,kDAAkD,EAAE,CAAC;;iDAChD;AAM1B;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,sBAAsB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC9E,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,qCAAqC,EAAE,CAAC;IAC5D,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,wDAAwD,EAAE,CAAC;;wCACrE;AAMjB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,OAAO,EAAE,CAAC;IAC3E,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,kCAAkC,EAAE,CAAC;IACzD,IAAA,wBAAM,EAAC,CAAC,EAAE,GAAG,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;;qCACrE;AAUd;IARC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,wBAAwB;QACrC,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,gCAAgC;QACzC,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;;uCACpC;AASvB;IAPC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,+DAA+D;QAC5E,OAAO,EAAE,IAAI;KACd,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IACnE,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;+CACb;AAMzB;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,0GAA0G,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IAChK,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,GAAE;IACX,IAAA,6BAAS,EAAC,CAAC,EAAE,GAAG,EAAE,GAAG,EAAE,EAAE,EAAE,CAAC,GAAG,CAAC,GAAG,CAAC,CAAC;;yDACH;AAMnC;IAJC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,0BAA0B,EAAE,OAAO,EAAE,IAAI,EAAE,CAAC;IAC/E,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;IAClE,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,6DAA6D,EAAE,CAAC;;6CACpE;AAWtB;IATC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,sBAAsB;QACnC,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,eAAe;QACxB,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,uCAAuC,EAAE,CAAC;IAC9D,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,yDAAyD,EAAE,CAAC;;0CAC5D;AAY1B;IAVC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,iFAAiF;QAC9F,IAAI,EAAE,MAAM;QACZ,OAAO,EAAE,YAAY;QACrB,SAAS,EAAE,EAAE;QACb,QAAQ,EAAE,IAAI;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,+CAA+C,EAAE,CAAC;IACtE,IAAA,wBAAM,EAAC,CAAC,EAAE,EAAE,EAAE,EAAE,OAAO,EAAE,qDAAqD,EAAE,CAAC;;8CACpD;AAK9B;IAHC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,mBAAmB,EAAE,OAAO,EAAE,KAAK,EAAE,CAAC;IACzE,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,2CAA2C,EAAE,CAAC;;0CAChD;AAQpB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,6CAA6C;QAC1D,OAAO,EAAE,KAAK;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,6CAA6C,EAAE,CAAC;;0CAClD;AAQpB;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,6GAA6G;QAC1H,OAAO,EAAE,KAAK;KACf,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,2BAAS,EAAC,EAAE,OAAO,EAAE,8CAA8C,EAAE,CAAC;;qDACxC;AAQ/B;IANC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,+BAA+B;QAC5C,OAAO,EAAE,mBAAmB;KAC7B,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,0BAAQ,EAAC,EAAE,OAAO,EAAE,4CAA4C,EAAE,CAAC;;6CAC9C;AAQtB;IANC,IAAA,6BAAmB,EAAC,EAAE,WAAW,EAAE,6BAA6B,EAAE,OAAO,EAAE,CAAC,CAAC,EAAE,CAAC,CAAC,EAAE,CAAC;IACpF,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,iCAAiC,EAAE,CAAC;IACvD,IAAA,6BAAW,EAAC,EAAE,OAAO,EAAE,0CAA0C,EAAE,CAAC;IACpE,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,MAAM,CAAC;IAClB,IAAA,uBAAK,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,OAAO,EAAE,mCAAmC,EAAE,CAAC;;sCACnD;AAWjB;IATC,IAAA,6BAAmB,EAAC;QACnB,WAAW,EAAE,gCAAgC;QAC7C,IAAI,EAAE,CAAC,uBAAU,CAAC;QAClB,OAAO,EAAE,CAAC,EAAE,UAAU,EAAE,aAAa,EAAE,gBAAgB,EAAE,mCAAgB,CAAC,SAAS,EAAE,CAAC;KACvF,CAAC;IACD,IAAA,4BAAU,GAAE;IACZ,IAAA,yBAAO,EAAC,EAAE,OAAO,EAAE,oCAAoC,EAAE,CAAC;IAC1D,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,uBAAU,CAAC;;4CACI","sourcesContent":["import { ApiProperty, ApiPropertyOptional, OmitType } from '@nestjs/swagger';\nimport { Transform, Type } from 'class-transformer';\nimport {\n  ArrayUnique,\n  IsArray,\n  IsBoolean,\n  IsEnum,\n  IsInt,\n  IsOptional,\n  IsString,\n  Length,\n  Min,\n  ValidateNested,\n} from 'class-validator';\nimport { StatoRegistrazione } from './StatoRegistrazione';\nimport { Permission } from './Permission';\nimport { TipoAbilitazione } from './TipoAbilitazione';\nimport { FiltriUtente } from './FiltriUtente';\n\n/**\n * Profilo Accessi con dati anagrafici, policy di accesso e filtri legacy.\n * I campi amministrativi (`flagSuper`, `flagAdmin`, ruoli, grant e policy password) devono essere\n * accettati soltanto da endpoint e flussi backend esplicitamente privilegiati.\n */\nexport class UserDto extends OmitType(FiltriUtente, ['codUte'] as const) {\n  @ApiProperty({ description: \"Codice identificativo univoco dell'utente.\", example: 123 })\n  @IsOptional()\n  @Type(() => Number)\n  @IsInt({ message: 'Il codice utente deve essere un intero.' })\n  @Min(1, { message: 'Il codice utente deve essere maggiore di zero.' })\n  codiceUtente!: number;\n\n  @ApiProperty({ description: \"Email dell'utente.\", example: 'mario.rossi@dev.it' })\n  @IsOptional()\n  @IsString({ message: \"L'email deve essere una stringa.\" })\n  @Length(3, 254, { message: \"L'email deve essere compresa tra 3 e 254 caratteri.\" })\n  email!: string;\n\n  @ApiPropertyOptional({ description: \"Flag per l'accettazione del GDPR.\", example: true })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag GDPR deve essere booleano.' })\n  flagGdpr?: boolean;\n\n  @ApiPropertyOptional({\n    description: 'Data di accettazione del GDPR.',\n    format: 'date-time',\n    example: '2024-03-18T12:34:56Z',\n  })\n  @IsOptional()\n  @IsString({ message: 'La data GDPR deve essere una stringa.' })\n  dataGdpr?: string;\n\n  @ApiPropertyOptional({\n    description: \"Data di inserimento dell'utente nel sistema.\",\n    format: 'date-time',\n    example: '2023-01-01T08:30:00Z',\n  })\n  @IsOptional()\n  @IsString({ message: 'La data di inserimento deve essere una stringa.' })\n  dataInserimento?: string;\n\n  @ApiPropertyOptional({\n    description: 'Data scadenza password.',\n    format: 'date-time',\n    example: '2025-06-01',\n  })\n  @IsOptional()\n  @IsString({ message: 'La data scadenza password deve essere una stringa.' })\n  dataScadenzaPassword?: string;\n\n  @ApiPropertyOptional({\n    description: \"Ultima data di accesso dell'utente.\",\n    format: 'date-time',\n    example: '2024-03-15T14:45:00Z',\n  })\n  @IsOptional()\n  @IsString({ message: 'La data ultimo accesso deve essere una stringa.' })\n  dataLastLogin?: string;\n\n  @ApiPropertyOptional({\n    description: \"Stato della registrazione dell'utente.\",\n    enum: StatoRegistrazione,\n    example: StatoRegistrazione.CONF,\n  })\n  @IsOptional()\n  @IsEnum(StatoRegistrazione, { message: 'Lo stato di registrazione non e valido.' })\n  statoRegistrazione?: StatoRegistrazione;\n\n  @ApiPropertyOptional({\n    description: \"Chiave di registrazione dell'utente.\",\n    example: 'abc123xyz',\n  })\n  @IsOptional()\n  @IsString({ message: 'La chiave registrazione deve essere una stringa.' })\n  keyRegistrazione?: string;\n\n  @ApiPropertyOptional({ description: \"Cognome dell'utente.\", example: 'Rossi' })\n  @IsOptional()\n  @IsString({ message: 'Il cognome deve essere una stringa.' })\n  @Length(1, 255, { message: 'Il cognome deve essere compreso tra 1 e 255 caratteri.' })\n  cognome?: string;\n\n  @ApiPropertyOptional({ description: \"Nome dell'utente.\", example: 'Mario' })\n  @IsOptional()\n  @IsString({ message: 'Il nome deve essere una stringa.' })\n  @Length(1, 255, { message: 'Il nome deve essere compreso tra 1 e 255 caratteri.' })\n  nome?: string;\n\n  @ApiPropertyOptional({\n    description: 'Avatar (URL o base64).',\n    type: String,\n    example: 'https://example.com/avatar.jpg',\n    nullable: true,\n  })\n  @IsOptional()\n  @IsString({ message: \"L'avatar deve essere una stringa.\" })\n  avatar?: string | null;\n\n  @ApiPropertyOptional({\n    description: \"Flag che indica se l'autenticazione a due fattori è attivata.\",\n    example: true,\n  })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag due fattori deve essere booleano.' })\n  @Transform(({ obj, key }) => obj[key])\n  flagDueFattori?: boolean;\n\n  @ApiPropertyOptional({ description: 'Consente accesso con il solo codice email. Richiede flagDueFattori e viene gestito dagli amministratori.', default: false })\n  @IsOptional()\n  @IsBoolean()\n  @Transform(({ obj, key }) => obj[key])\n  passwordlessLoginEnabled?: boolean;\n\n  @ApiPropertyOptional({ description: 'Codice lingua preferito.', example: 'it' })\n  @IsOptional()\n  @IsString({ message: 'Il codice lingua deve essere una stringa.' })\n  @Length(1, 20, { message: 'Il codice lingua deve essere compreso tra 1 e 20 caratteri.' })\n  codiceLingua?: string;\n\n  @ApiPropertyOptional({\n    description: 'Numero di cellulare.',\n    type: String,\n    example: '+393401234567',\n    nullable: true,\n  })\n  @IsOptional()\n  @IsString({ message: 'Il cellulare deve essere una stringa.' })\n  @Length(1, 50, { message: 'Il cellulare deve essere compreso tra 1 e 50 caratteri.' })\n  cellulare?: string | null;\n\n  @ApiPropertyOptional({\n    description: \"Pagina di default mostrata all'utente dopo il login (percorso o codice pagina).\",\n    type: String,\n    example: '/dashboard',\n    maxLength: 50,\n    nullable: true,\n  })\n  @IsOptional()\n  @IsString({ message: 'La pagina di default deve essere una stringa.' })\n  @Length(1, 50, { message: 'La pagina di default non puo superare 50 caratteri.' })\n  paginaDefault?: string | null;\n\n  @ApiPropertyOptional({ description: 'Flag superutente.', example: false })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag superutente deve essere booleano.' })\n  flagSuper?: boolean;\n\n  @ApiPropertyOptional({\n    description: \"Flag che indica se l'utente è configuratore\",\n    example: false,\n  })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag configuratore deve essere booleano.' })\n  flagAdmin?: boolean;\n\n  @ApiPropertyOptional({\n    description: 'Abilita il login locale con password. Se false, l utente puo autenticarsi solo tramite identita SSO attive.',\n    example: false,\n  })\n  @IsOptional()\n  @IsBoolean({ message: 'Il flag login password deve essere booleano.' })\n  passwordLoginEnabled?: boolean;\n\n  @ApiPropertyOptional({\n    description: 'Metadata JSON personalizzato.',\n    example: '{\"theme\": \"dark\"}',\n  })\n  @IsOptional()\n  @IsString({ message: 'I metadata JSON devono essere una stringa.' })\n  jsonMetadata?: string;\n\n  @ApiPropertyOptional({ description: \"Ruoli assegnati all'utente.\", example: [1, 2] })\n  @IsOptional()\n  @IsArray({ message: 'I ruoli devono essere un array.' })\n  @ArrayUnique({ message: 'I ruoli non possono contenere duplicati.' })\n  @Type(() => Number)\n  @IsInt({ each: true, message: 'Ogni ruolo deve essere un intero.' })\n  roles?: number[];\n\n  @ApiPropertyOptional({\n    description: \"Permessi assegnati all'utente.\",\n    type: [Permission],\n    example: [{ codiceMenu: 'MNUOFFICINA', tipoAbilitazione: TipoAbilitazione.SCRITTURA }],\n  })\n  @IsOptional()\n  @IsArray({ message: 'I permessi devono essere un array.' })\n  @ValidateNested({ each: true })\n  @Type(() => Permission)\n  permissions?: Permission[];\n}\n"]}

package/dist/accessi-module/Dtos/UserGrantsDto.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserGrantsDto.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UserGrantsDto.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAAyC;AACzC,qDAAiD;AACjD,yDAAsD;AACtD,iCAA8B;AAE9B,MAAa,aAAa;CAevB;AAfH,sCAeG;AAXC;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,2BAA2B,EAAE,IAAI,EAAE,CAAC,mCAAgB,CAAC,EAAE,CAAC;IACnF,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,mCAAgB,CAAC;;mDACK;AAKlC;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,oBAAoB,EAAE,IAAI,EAAE,CAAC,WAAI,CAAC,EAAE,CAAC;IAChE,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,WAAI,CAAC;;4CACF;AAKf;IAHC,IAAA,qBAAW,EAAC,EAAE,WAAW,EAAE,kBAAkB,EAAE,IAAI,EAAE,CAAC,mCAAgB,CAAC,EAAE,CAAC;IAC1E,IAAA,gCAAc,EAAC,EAAE,IAAI,EAAE,IAAI,EAAE,CAAC;IAC9B,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,mCAAgB,CAAC;;6CACD","sourcesContent":["import { ApiProperty } from \"@nestjs/swagger\";\nimport { Type } from \"class-transformer\";\nimport { ValidateNested } from \"class-validator\";\nimport { AbilitazioneMenu } from \"./AbilitazioneMenu\";\nimport { Role } from \"./Role\";\n\nexport class UserGrantsDto {\n    @ApiProperty({ description: 'Abilitazioni dell\\'utente', type: [AbilitazioneMenu] })\n    @ValidateNested({ each: true })\n    @Type(() => AbilitazioneMenu)\n    abilitazioni!: AbilitazioneMenu[];\n  \n    @ApiProperty({ description: 'Ruoli dell\\'utente', type: [Role] })\n    @ValidateNested({ each: true })\n    @Type(() => Role)\n    ruoli!: Role[];\n  \n    @ApiProperty({ description: 'Grants combinati', type: [AbilitazioneMenu] })\n    @ValidateNested({ each: true })\n    @Type(() => AbilitazioneMenu)\n    grants!: AbilitazioneMenu[];\n  }"]}

package/dist/accessi-module/Dtos/UserGrantsResponse.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"UserGrantsResponse.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/UserGrantsResponse.ts"],"names":[],"mappings":";;;;;;;;;;;;AAAA,6CAA8C;AAC9C,yDAAyC;AACzC,qDAAiD;AACjD,iDAA8C;AAC9C,mDAAgD;AAEhD,MAAa,kBAAmB,SAAQ,2BAAY;CAKnD;AALD,gDAKC;AADC;IAHC,IAAA,qBAAW,EAAC,EAAE,IAAI,EAAE,6BAAa,EAAE,CAAC;IACpC,IAAA,gCAAc,GAAE;IAChB,IAAA,wBAAI,EAAC,GAAG,EAAE,CAAC,6BAAa,CAAC;8BACjB,6BAAa;kDAAC","sourcesContent":["import { ApiProperty } from '@nestjs/swagger';\nimport { Type } from 'class-transformer';\nimport { ValidateNested } from 'class-validator';\nimport { BaseResponse } from './BaseResponse';\nimport { UserGrantsDto } from './UserGrantsDto';\n\nexport class UserGrantsResponse extends BaseResponse {\n  @ApiProperty({ type: UserGrantsDto })\n  @ValidateNested()\n  @Type(() => UserGrantsDto)\n  Result!: UserGrantsDto;\n}\n"]}

package/dist/accessi-module/Dtos/index.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"index.js","sourceRoot":"","sources":["../../../src/accessi-module/Dtos/index.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;AAAA,iDAA+B;AAC/B,uDAAqC;AACrC,8CAA4B;AAC5B,qDAAmC;AACnC,mEAAiD;AACjD,6DAA2C;AAC3C,gEAA8C;AAC9C,iDAA+B;AAC/B,gDAA8B;AAC9B,gEAA8C;AAC9C,+DAA4C;AAE5C,iDAA+B;AAC/B,0DAAwC;AACxC,0DAAwC;AACxC,0DAAwC;AACxC,2DAAyC;AACzC,sDAAoC;AACpC,gDAA8B;AAC9B,iDAA+B;AAC/B,kDAAgC;AAChC,+CAA6B;AAC7B,0DAAwC;AACxC,qDAAmC;AACnC,uDAAqC;AACrC,yCAAuB;AACvB,+CAA6B;AAC7B,8CAA4B;AAC5B,kEAAgD;AAChD,uDAAqC;AACrC,qDAAmC;AACnC,gDAA8B;AAC9B,4CAA0B;AAC1B,uDAAqC;AAErC,8CAA2B;AAE3B,iDAA+B;AAE/B,kDAAgC","sourcesContent":["export * from \"./Abilitazione\";\nexport * from \"./AdminBootstrapDtos\";\nexport * from \"./AuditDtos\";\nexport * from \"./AbilitazioneMenu\";\nexport * from \"./AssignPermissionsToUserRequest\";\nexport * from \"./AssignRolesToUserRequest\";\nexport * from \"./AuthenticatedUserPayloadDto\";\nexport * from \"./BaseResponse\";\nexport * from \"./CatalogDtos\";\nexport * from \"./ConfirmResetPasswordRequest\";\nexport * from \"./UpdateEnabledStatusRequest\"\n\nexport * from \"./FiltriUtente\";\nexport * from \"./FederatedIdentityDtos\";\nexport * from \"./FederatedExchangeDtos\";\nexport * from \"./GetUserByTokenRequest\";\nexport * from \"./GetUserByTokenResponse\";\nexport * from \"./IntrospectionDtos\";\nexport * from \"./LoginAsDtos\";\nexport * from \"./LoginRequest\";\nexport * from \"./LoginResponse\";\nexport * from \"./Permission\";\nexport * from \"./PublicRegisterRequest\";\nexport * from \"./RefreshTokenDtos\";\nexport * from \"./RevokeTokenRequest\";\nexport * from \"./Role\";\nexport * from \"./SchemaDtos\";\nexport * from \"./ScopeDtos\";\nexport * from \"./SendResetPasswordEmailRequest\";\nexport * from \"./StatoRegistrazione\";\nexport * from \"./TipoAbilitazione\";\nexport * from \"./TokenResult\";\nexport * from \"./UserDto\";\nexport * from \"./UserGrantsResponse\";\n\nexport * from \"./RuoliMenu\"\n\nexport * from \"./ServiceToken\";\n\nexport * from './TwoFactorDtos';\n"]}

package/dist/accessi-module/Services/AdminBootstrapService/AdminBootstrapService.d.ts

@@ -1,33 +0,0 @@
-import type { AccessiOptions } from '../../AccessiModule';
-import { AuthService } from '../AuthService/AuthService';
-import { UserService } from '../UserService/UserService';
-export interface BootstrapAdminResult {
-    codiceUtente: number;
-    email: string;
-    /** Presente solo quando la password e stata generata dal server. */
-    password?: string;
-    passwordGenerated: boolean;
-}
-/**
- * Crea il primo utente admin tramite il token casuale di avvio. Non invia email di conferma:
- * l'utente nasce in stato CONF e con password impostata (fornita o generata). Il token e monouso
- * e valido solo per il processo corrente.
- */
-export declare class AdminBootstrapService {
-    private readonly options;
-    private readonly userService;
-    private readonly authService;
-    private readonly logger;
-    constructor(options: AccessiOptions, userService: UserService, authService: AuthService);
-    /** Indica se il backend ha abilitato l'area "crea utente admin". */
-    isEnabled(): boolean;
-    bootstrap(request: {
-        token?: string;
-        email?: string;
-        nome?: string;
-        cognome?: string;
-        password?: string;
-        superUser?: boolean;
-    }): Promise<BootstrapAdminResult>;
-    private generatePassword;
-}

package/dist/accessi-module/Services/AdminBootstrapService/AdminBootstrapService.js

@@ -1,106 +0,0 @@
-"use strict";
-var __decorate = (this && this.__decorate) || function (decorators, target, key, desc) {
-    var c = arguments.length, r = c < 3 ? target : desc === null ? desc = Object.getOwnPropertyDescriptor(target, key) : desc, d;
-    if (typeof Reflect === "object" && typeof Reflect.decorate === "function") r = Reflect.decorate(decorators, target, key, desc);
-    else for (var i = decorators.length - 1; i >= 0; i--) if (d = decorators[i]) r = (c < 3 ? d(r) : c > 3 ? d(target, key, r) : d(target, key)) || r;
-    return c > 3 && r && Object.defineProperty(target, key, r), r;
-};
-var __metadata = (this && this.__metadata) || function (k, v) {
-    if (typeof Reflect === "object" && typeof Reflect.metadata === "function") return Reflect.metadata(k, v);
-};
-var __param = (this && this.__param) || function (paramIndex, decorator) {
-    return function (target, key) { decorator(target, key, paramIndex); }
-};
-var __awaiter = (this && this.__awaiter) || function (thisArg, _arguments, P, generator) {
-    function adopt(value) { return value instanceof P ? value : new P(function (resolve) { resolve(value); }); }
-    return new (P || (P = Promise))(function (resolve, reject) {
-        function fulfilled(value) { try { step(generator.next(value)); } catch (e) { reject(e); } }
-        function rejected(value) { try { step(generator["throw"](value)); } catch (e) { reject(e); } }
-        function step(result) { result.done ? resolve(result.value) : adopt(result.value).then(fulfilled, rejected); }
-        step((generator = generator.apply(thisArg, _arguments || [])).next());
-    });
-};
-var AdminBootstrapService_1;
-Object.defineProperty(exports, "__esModule", { value: true });
-exports.AdminBootstrapService = void 0;
-const common_1 = require("@nestjs/common");
-const crypto_1 = require("crypto");
-const Logger_1 = require("../../../Logger");
-const StatoRegistrazione_1 = require("../../Dtos/StatoRegistrazione");
-const AuthService_1 = require("../AuthService/AuthService");
-const UserService_1 = require("../UserService/UserService");
-const adminBootstrap_1 = require("../../security/adminBootstrap");
-/**
- * Crea il primo utente admin tramite il token casuale di avvio. Non invia email di conferma:
- * l'utente nasce in stato CONF e con password impostata (fornita o generata). Il token e monouso
- * e valido solo per il processo corrente.
- */
-let AdminBootstrapService = AdminBootstrapService_1 = class AdminBootstrapService {
-    constructor(options, userService, authService) {
-        this.options = options;
-        this.userService = userService;
-        this.authService = authService;
-        this.logger = new Logger_1.Logger(AdminBootstrapService_1.name);
-    }
-    /** Indica se il backend ha abilitato l'area "crea utente admin". */
-    isEnabled() {
-        var _a;
-        return ((_a = this.options.adminBootstrap) === null || _a === void 0 ? void 0 : _a.enabled) === true;
-    }
-    bootstrap(request) {
-        return __awaiter(this, void 0, void 0, function* () {
-            var _a, _b;
-            if (!this.isEnabled()) {
-                throw new common_1.ForbiddenException({
-                    code: 'ACCESSI_ADMIN_BOOTSTRAP_DISABLED',
-                    message: 'Il bootstrap admin non e abilitato in questa istanza Accessi.',
-                });
-            }
-            if (!(0, adminBootstrap_1.isValidAdminBootstrapToken)(request === null || request === void 0 ? void 0 : request.token)) {
-                throw new common_1.UnauthorizedException({
-                    code: 'ACCESSI_ADMIN_BOOTSTRAP_TOKEN_INVALID',
-                    message: 'Token di bootstrap non valido.',
-                });
-            }
-            const email = typeof (request === null || request === void 0 ? void 0 : request.email) === 'string' ? request.email.trim().toLowerCase() : '';
-            if (!email) {
-                throw new common_1.BadRequestException({
-                    code: 'ACCESSI_ADMIN_BOOTSTRAP_EMAIL_REQUIRED',
-                    message: "L'email e obbligatoria per creare l'utente admin.",
-                });
-            }
-            const superUser = (_a = request === null || request === void 0 ? void 0 : request.superUser) !== null && _a !== void 0 ? _a : ((_b = this.options.adminBootstrap) === null || _b === void 0 ? void 0 : _b.superUser) !== false;
-            const providedPassword = typeof (request === null || request === void 0 ? void 0 : request.password) === 'string' ? request.password : '';
-            const password = providedPassword.length > 0 ? providedPassword : this.generatePassword();
-            const passwordGenerated = providedPassword.length === 0;
-            const codiceUtente = yield this.userService.register({
-                email,
-                nome: request === null || request === void 0 ? void 0 : request.nome,
-                cognome: request === null || request === void 0 ? void 0 : request.cognome,
-                flagAdmin: true,
-                flagSuper: superUser,
-            }, { allowPrivilegedFields: true, initialState: StatoRegistrazione_1.StatoRegistrazione.CONF });
-            yield this.authService.setPassword(codiceUtente, password);
-            // Monouso: un bootstrap riuscito invalida il token fino al prossimo riavvio.
-            (0, adminBootstrap_1.clearAdminBootstrapToken)();
-            this.logger.info(`Utente admin di bootstrap creato: ${email} (codice ${codiceUtente}). Token invalidato.`);
-            return {
-                codiceUtente,
-                email,
-                password: passwordGenerated ? password : undefined,
-                passwordGenerated,
-            };
-        });
-    }
-    generatePassword() {
-        return `Aa1!${(0, crypto_1.randomBytes)(9).toString('base64url')}`;
-    }
-};
-exports.AdminBootstrapService = AdminBootstrapService;
-exports.AdminBootstrapService = AdminBootstrapService = AdminBootstrapService_1 = __decorate([
-    (0, common_1.Injectable)(),
-    __param(0, (0, common_1.Inject)('ACCESSI_OPTIONS')),
-    __metadata("design:paramtypes", [Object, UserService_1.UserService,
-        AuthService_1.AuthService])
-], AdminBootstrapService);
-//# sourceMappingURL=AdminBootstrapService.js.map

package/dist/accessi-module/Services/AdminBootstrapService/AdminBootstrapService.js.map

@@ -1 +0,0 @@
-{"version":3,"file":"AdminBootstrapService.js","sourceRoot":"","sources":["../../../../src/accessi-module/Services/AdminBootstrapService/AdminBootstrapService.ts"],"names":[],"mappings":";;;;;;;;;;;;;;;;;;;;;;;;;AAAA,2CAAoH;AACpH,mCAAqC;AACrC,4CAAyC;AAEzC,sEAAmE;AACnE,4DAAyD;AACzD,4DAAyD;AACzD,kEAAqG;AAUrG;;;;GAIG;AAEI,IAAM,qBAAqB,6BAA3B,MAAM,qBAAqB;IAGhC,YAC6B,OAAwC,EAClD,WAAwB,EACxB,WAAwB;QAFG,YAAO,GAAP,OAAO,CAAgB;QAClD,gBAAW,GAAX,WAAW,CAAa;QACxB,gBAAW,GAAX,WAAW,CAAa;QAL1B,WAAM,GAAG,IAAI,eAAM,CAAC,uBAAqB,CAAC,IAAI,CAAC,CAAC;IAM9D,CAAC;IAEJ,oEAAoE;IACpE,SAAS;;QACP,OAAO,CAAA,MAAA,IAAI,CAAC,OAAO,CAAC,cAAc,0CAAE,OAAO,MAAK,IAAI,CAAC;IACvD,CAAC;IAEK,SAAS,CAAC,OAAoH;;;YAClI,IAAI,CAAC,IAAI,CAAC,SAAS,EAAE,EAAE,CAAC;gBACtB,MAAM,IAAI,2BAAkB,CAAC;oBAC3B,IAAI,EAAE,kCAAkC;oBACxC,OAAO,EAAE,+DAA+D;iBACzE,CAAC,CAAC;YACL,CAAC;YAED,IAAI,CAAC,IAAA,2CAA0B,EAAC,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAC,EAAE,CAAC;gBAChD,MAAM,IAAI,8BAAqB,CAAC;oBAC9B,IAAI,EAAE,uCAAuC;oBAC7C,OAAO,EAAE,gCAAgC;iBAC1C,CAAC,CAAC;YACL,CAAC;YAED,MAAM,KAAK,GAAG,OAAO,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,KAAK,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,KAAK,CAAC,IAAI,EAAE,CAAC,WAAW,EAAE,CAAC,CAAC,CAAC,EAAE,CAAC;YAC3F,IAAI,CAAC,KAAK,EAAE,CAAC;gBACX,MAAM,IAAI,4BAAmB,CAAC;oBAC5B,IAAI,EAAE,wCAAwC;oBAC9C,OAAO,EAAE,mDAAmD;iBAC7D,CAAC,CAAC;YACL,CAAC;YAED,MAAM,SAAS,GAAG,MAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,SAAS,mCAAI,CAAA,MAAA,IAAI,CAAC,OAAO,CAAC,cAAc,0CAAE,SAAS,MAAK,KAAK,CAAC;YACzF,MAAM,gBAAgB,GAAG,OAAO,CAAA,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,QAAQ,CAAA,KAAK,QAAQ,CAAC,CAAC,CAAC,OAAO,CAAC,QAAQ,CAAC,CAAC,CAAC,EAAE,CAAC;YACvF,MAAM,QAAQ,GAAG,gBAAgB,CAAC,MAAM,GAAG,CAAC,CAAC,CAAC,CAAC,gBAAgB,CAAC,CAAC,CAAC,IAAI,CAAC,gBAAgB,EAAE,CAAC;YAC1F,MAAM,iBAAiB,GAAG,gBAAgB,CAAC,MAAM,KAAK,CAAC,CAAC;YAExD,MAAM,YAAY,GAAG,MAAM,IAAI,CAAC,WAAW,CAAC,QAAQ,CAClD;gBACE,KAAK;gBACL,IAAI,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,IAAI;gBACnB,OAAO,EAAE,OAAO,aAAP,OAAO,uBAAP,OAAO,CAAE,OAAO;gBACzB,SAAS,EAAE,IAAI;gBACf,SAAS,EAAE,SAAS;aACrB,EACD,EAAE,qBAAqB,EAAE,IAAI,EAAE,YAAY,EAAE,uCAAkB,CAAC,IAAI,EAAE,CACvE,CAAC;YAEF,MAAM,IAAI,CAAC,WAAW,CAAC,WAAW,CAAC,YAAY,EAAE,QAAQ,CAAC,CAAC;YAE3D,6EAA6E;YAC7E,IAAA,yCAAwB,GAAE,CAAC;YAC3B,IAAI,CAAC,MAAM,CAAC,IAAI,CAAC,qCAAqC,KAAK,YAAY,YAAY,sBAAsB,CAAC,CAAC;YAE3G,OAAO;gBACL,YAAY;gBACZ,KAAK;gBACL,QAAQ,EAAE,iBAAiB,CAAC,CAAC,CAAC,QAAQ,CAAC,CAAC,CAAC,SAAS;gBAClD,iBAAiB;aAClB,CAAC;QACJ,CAAC;KAAA;IAEO,gBAAgB;QACtB,OAAO,OAAO,IAAA,oBAAW,EAAC,CAAC,CAAC,CAAC,QAAQ,CAAC,WAAW,CAAC,EAAE,CAAC;IACvD,CAAC;CACF,CAAA;AAtEY,sDAAqB;gCAArB,qBAAqB;IADjC,IAAA,mBAAU,GAAE;IAKR,WAAA,IAAA,eAAM,EAAC,iBAAiB,CAAC,CAAA;6CACI,yBAAW;QACX,yBAAW;GANhC,qBAAqB,CAsEjC","sourcesContent":["import { BadRequestException, ForbiddenException, Inject, Injectable, UnauthorizedException } from '@nestjs/common';\nimport { randomBytes } from 'crypto';\nimport { Logger } from '../../../Logger';\nimport type { AccessiOptions } from '../../AccessiModule';\nimport { StatoRegistrazione } from '../../Dtos/StatoRegistrazione';\nimport { AuthService } from '../AuthService/AuthService';\nimport { UserService } from '../UserService/UserService';\nimport { clearAdminBootstrapToken, isValidAdminBootstrapToken } from '../../security/adminBootstrap';\n\nexport interface BootstrapAdminResult {\n  codiceUtente: number;\n  email: string;\n  /** Presente solo quando la password e stata generata dal server. */\n  password?: string;\n  passwordGenerated: boolean;\n}\n\n/**\n * Crea il primo utente admin tramite il token casuale di avvio. Non invia email di conferma:\n * l'utente nasce in stato CONF e con password impostata (fornita o generata). Il token e monouso\n * e valido solo per il processo corrente.\n */\n@Injectable()\nexport class AdminBootstrapService {\n  private readonly logger = new Logger(AdminBootstrapService.name);\n\n  constructor(\n    @Inject('ACCESSI_OPTIONS') private readonly options: AccessiOptions,\n    private readonly userService: UserService,\n    private readonly authService: AuthService,\n  ) {}\n\n  /** Indica se il backend ha abilitato l'area \"crea utente admin\". */\n  isEnabled(): boolean {\n    return this.options.adminBootstrap?.enabled === true;\n  }\n\n  async bootstrap(request: { token?: string; email?: string; nome?: string; cognome?: string; password?: string; superUser?: boolean }): Promise<BootstrapAdminResult> {\n    if (!this.isEnabled()) {\n      throw new ForbiddenException({\n        code: 'ACCESSI_ADMIN_BOOTSTRAP_DISABLED',\n        message: 'Il bootstrap admin non e abilitato in questa istanza Accessi.',\n      });\n    }\n\n    if (!isValidAdminBootstrapToken(request?.token)) {\n      throw new UnauthorizedException({\n        code: 'ACCESSI_ADMIN_BOOTSTRAP_TOKEN_INVALID',\n        message: 'Token di bootstrap non valido.',\n      });\n    }\n\n    const email = typeof request?.email === 'string' ? request.email.trim().toLowerCase() : '';\n    if (!email) {\n      throw new BadRequestException({\n        code: 'ACCESSI_ADMIN_BOOTSTRAP_EMAIL_REQUIRED',\n        message: \"L'email e obbligatoria per creare l'utente admin.\",\n      });\n    }\n\n    const superUser = request?.superUser ?? this.options.adminBootstrap?.superUser !== false;\n    const providedPassword = typeof request?.password === 'string' ? request.password : '';\n    const password = providedPassword.length > 0 ? providedPassword : this.generatePassword();\n    const passwordGenerated = providedPassword.length === 0;\n\n    const codiceUtente = await this.userService.register(\n      {\n        email,\n        nome: request?.nome,\n        cognome: request?.cognome,\n        flagAdmin: true,\n        flagSuper: superUser,\n      },\n      { allowPrivilegedFields: true, initialState: StatoRegistrazione.CONF },\n    );\n\n    await this.authService.setPassword(codiceUtente, password);\n\n    // Monouso: un bootstrap riuscito invalida il token fino al prossimo riavvio.\n    clearAdminBootstrapToken();\n    this.logger.info(`Utente admin di bootstrap creato: ${email} (codice ${codiceUtente}). Token invalidato.`);\n\n    return {\n      codiceUtente,\n      email,\n      password: passwordGenerated ? password : undefined,\n      passwordGenerated,\n    };\n  }\n\n  private generatePassword(): string {\n    return `Aa1!${randomBytes(9).toString('base64url')}`;\n  }\n}\n"]}

package/dist/accessi-module/Services/AuthService/AuthService.d.ts

@@ -1,127 +0,0 @@
-import { TwoFactorService } from '../TwoFactorService/TwoFactorService';
-import type { AccessiOptions } from "../../AccessiModule";
-import { LoginRequest } from "../../Dtos/LoginRequest";
-import { LoginResult } from "../../Dtos/LoginResponse";
-import { UserService } from "../UserService/UserService";
-import { FiltriService } from "../FiltriService/FiltriService";
-import { TokenResult } from '../../Dtos/TokenResult';
-/** Error code deliberately returned when a user is configured as SSO-only. */
-export declare const PASSWORD_LOGIN_DISABLED = "PASSWORD_LOGIN_DISABLED";
-/** Esito di una verifica token usata dall'endpoint di introspection. */
-export interface AccessiTokenIntrospectionResult {
-    active: boolean;
-    codiceUtente?: number;
-    payload?: Record<string, unknown>;
-}
-interface AccessiTokenIssueOptions {
-    /** Sovrascrive jwtOptions.expiresIn per token a durata ridotta (es. Login as). */
-    expiresIn?: string | number;
-    /** Claim aggiuntive, per esempio l'attore che ha generato un token di impersonazione. */
-    extraClaims?: Record<string, unknown>;
-}
-export declare class AuthService {
-    private userService;
-    private filtriService;
-    private readonly accessiOptions;
-    private readonly twoFactorService;
-    private readonly logger;
-    constructor(userService: UserService, filtriService: FiltriService, accessiOptions: AccessiOptions, twoFactorService: TwoFactorService);
-    private refreshPasswordExpiration;
-    private isMockDemoUserEnabled;
-    private createToken;
-    /** Creates the normal internal JWT consumed by all existing Accessi guards. */
-    createAccessiToken(utente: LoginResult['utente'], methods?: string[], tokenOptions?: AccessiTokenIssueOptions): TokenResult;
-    /** Emette il refresh token quando `jwtOptions.refreshExpiresIn` e configurato. */
-    createRefreshToken(utente: LoginResult['utente'], methods?: string[], tokenOptions?: AccessiTokenIssueOptions): TokenResult | undefined;
-    /** Crea la coppia access + refresh token usata da login, 2FA e SSO. */
-    createTokenPair(utente: LoginResult['utente'], methods?: string[], options?: {
-        familyId?: string;
-    }): {
-        access: TokenResult;
-        refresh?: TokenResult;
-    };
-    /**
-     * Emette l'access token per l'utente target, con l'attore registrato nelle
-     * claim `act` e `loginAs`. La durata e' quella standard di jwtOptions.expiresIn.
-     */
-    createLoginAsToken(utente: LoginResult['utente'], actor: {
-        codiceUtente: number;
-        email?: string;
-    }): TokenResult;
-    /** Builds the standard login response for a user authenticated by a supported method. */
-    getLoginResultForUser(codiceUtente: number, scope?: string): Promise<LoginResult>;
-    /** Users without a row retain the historic password-login enabled default. */
-    private isPasswordLoginEnabled;
-    /**
-     * Autentica con credenziali locali e restituisce profilo, filtri e grant effettivi.
-     * Non crea il JWT: il controller o il flusso SSO deve chiamare `createAccessiToken` sul risultato.
-     * Per utenti SSO-only genera `PASSWORD_LOGIN_DISABLED`, da trattare come istruzione a usare l'SSO.
-     */
-    login(request: LoginRequest): Promise<LoginResult>;
-    /**
-     * Verifica un access token Accessi senza sollevare eccezioni per token invalidi.
-     *
-     * Gli errori di configurazione o database continuano a propagarsi: un problema
-     * infrastrutturale non deve essere confuso con un token scaduto.
-     */
-    introspectAccessToken(token: string): Promise<AccessiTokenIntrospectionResult>;
-    /**
-     * Verifica un JWT Accessi e ricostruisce il profilo corrente dal database.
-     * Questo evita che privilegi, stato utente o flag amministrativi presenti in un token vecchio restino validi.
-     */
-    getAuthenticatedTokenPayload(token: string): Promise<Record<string, unknown>>;
-    /**
-     * Scambia un refresh token valido con una nuova coppia access + refresh.
-     *
-     * Il refresh token non e accettato dai guard API: ha `typ: "refresh"`.
-     */
-    refreshAccessToken(refreshToken: string): Promise<LoginResult>;
-    /**
-     * Gestisce il riuso di un refresh token gia consumato.
-     *
-     * Il riuso entro `reuseGraceMs` e trattato come retry concorrente del client e
-     * non revoca nulla. Oltre la finestra e considerato un possibile furto: viene
-     * revocata l'intera famiglia (stesso login) e, solo se esplicitamente
-     * configurato, anche le altre sessioni dell'utente.
-     */
-    private handleRefreshTokenReuse;
-    /** Starts a second-factor challenge after the hosting backend has verified an SSO identity. */
-    beginFederatedTwoFactor(codiceUtente: number, identityKey: string): Promise<LoginResult>;
-    private validateTwoFactorProof;
-    verifyTwoFactor(challengeId: string, code: string, scope?: string): Promise<LoginResult>;
-    resendTwoFactor(challengeId: string): Promise<LoginResult>;
-    /**
-     * Persiste una password hashata e aggiorna la scadenza, se la policy password e attiva. Non invia email.
-     * Con `enforcePolicy` (default true) valida la password secondo la policy moderna; i flussi di
-     * migrazione delle password legacy passano `enforcePolicy: false` per non bloccare password storiche.
-     * Con `revokeSessions` (default true) invalida le sessioni precedenti: un cambio password deve
-     * interrompere i token gia emessi.
-     */
-    setPassword(codiceUtente: number, nuovaPassword: string, options?: {
-        enforcePolicy?: boolean;
-        revokeSessions?: boolean;
-    }): Promise<import("../../../Orm").Row[]>;
-    /**
-     * Revoca le sessioni dopo un evento che deve invalidare i token esistenti.
-     * Best effort: un errore dello store non deve annullare l'operazione gia
-     * persistita (cambio password, blocco, cancellazione).
-     */
-    private revokeSessionsAfterSecurityChange;
-    /**
-     * Converte le password legacy cifrate nel formato hash compatibile, senza conoscere le password in chiaro.
-     * E idempotente: hash moderni e gia migrati vengono ignorati.
-     */
-    migrateLegacyEncryptedPasswords(): Promise<void>;
-    /** Verifica una password locale e migra automaticamente il formato legacy dopo una verifica positiva. */
-    verifyPassword(codiceUtente: number, plainPassword: string): Promise<boolean>;
-    /** Restituisce l'utente fittizio amministratore; usabile solo con `mockDemoUser` esplicitamente abilitato. */
-    getAdminUser(): Promise<LoginResult>;
-    /** Restituisce l'utente demo fittizio; non contiene dati o grant reali. */
-    getDemoUser(): LoginResult;
-    /**
-     * Consuma un token monouso di reset, riporta l'utente allo stato confermato e salva la nuova password.
-     * Il nonce in `UTENTI.KEYREG` viene annullato prima di impostare la password, impedendo il riuso del token.
-     */
-    confirmResetPassword(token: string, newPassword: string): Promise<void>;
-}
-export {};